diff options
| author | Petr Viktorin <pviktori@redhat.com> | 2014-05-14 14:57:35 +0200 |
|---|---|---|
| committer | Petr Viktorin <pviktori@redhat.com> | 2014-06-04 17:34:18 +0200 |
| commit | 91a5aecd4892700cf1468a9ac5608227d06d21db (patch) | |
| tree | 6109a4db118f81a3d346a7d21797178716cfc7ed /install/updates/40-delegation.update | |
| parent | acb2ca47d68becca8c7385899c9107d5b6a13a1a (diff) | |
| download | freeipa-91a5aecd4892700cf1468a9ac5608227d06d21db.tar.gz freeipa-91a5aecd4892700cf1468a9ac5608227d06d21db.tar.xz freeipa-91a5aecd4892700cf1468a9ac5608227d06d21db.zip | |
Convert Sudo rule default permissions to managed
Part of the work for: https://fedorahosted.org/freeipa/ticket/4346
Reviewed-By: Martin Kosek <mkosek@redhat.com>
Diffstat (limited to 'install/updates/40-delegation.update')
| -rw-r--r-- | install/updates/40-delegation.update | 25 |
1 files changed, 0 insertions, 25 deletions
diff --git a/install/updates/40-delegation.update b/install/updates/40-delegation.update index 7f0f85124..3f3b98799 100644 --- a/install/updates/40-delegation.update +++ b/install/updates/40-delegation.update @@ -108,27 +108,6 @@ default:objectClass: top default:cn: Sudo Administrator default:description: Sudo Administrator -dn: cn=Add Sudo rule,cn=permissions,cn=pbac,$SUFFIX -default:objectClass: groupofnames -default:objectClass: ipapermission -default:objectClass: top -default:cn: Add Sudo rule -default:member: cn=Sudo Administrator,cn=privileges,cn=pbac,$SUFFIX - -dn: cn=Delete Sudo rule,cn=permissions,cn=pbac,$SUFFIX -default:objectClass: groupofnames -default:objectClass: ipapermission -default:objectClass: top -default:cn: Delete Sudo rule -default:member: cn=Sudo Administrator,cn=privileges,cn=pbac,$SUFFIX - -dn: cn=Modify Sudo rule,cn=permissions,cn=pbac,$SUFFIX -default:objectClass: groupofnames -default:objectClass: ipapermission -default:objectClass: top -default:cn: Modify Sudo rule -default:member: cn=Sudo Administrator,cn=privileges,cn=pbac,$SUFFIX - dn: cn=Add Sudo command,cn=permissions,cn=pbac,$SUFFIX default:objectClass: groupofnames default:objectClass: ipapermission @@ -172,10 +151,6 @@ default:cn: Manage Sudo command group membership default:member: cn=Sudo Administrator,cn=privileges,cn=pbac,$SUFFIX dn: $SUFFIX -add:aci: '(target = "ldap:///ipauniqueid=*,cn=sudorules,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Add Sudo rule";allow (add) groupdn = "ldap:///cn=Add Sudo rule,cn=permissions,cn=pbac,$SUFFIX";)' -add:aci: '(target = "ldap:///ipauniqueid=*,cn=sudorules,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Delete Sudo rule";allow (delete) groupdn = "ldap:///cn=Delete Sudo rule,cn=permissions,cn=pbac,$SUFFIX";)' -add:aci: '(targetattr = "description || ipaenabledflag || usercategory || hostcategory || cmdcategory || ipasudorunasusercategory || ipasudorunasgroupcategory || externaluser || ipasudorunasextuser || ipasudorunasextgroup || memberdenycmd || memberallowcmd || memberuser")(target = "ldap:///ipauniqueid=*,cn=sudorules,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Modify Sudo rule";allow (write) groupdn = "ldap:///cn=Modify Sudo rule,cn=permissions,cn=pbac,$SUFFIX";)' - remove:aci: '(targetattr = "description")(target = "ldap:///sudocmd=*,cn=sudocmds,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Modify Sudo command";allow (write) groupdn = "ldap:///cn=Modify Sudo command,cn=permissions,cn=pbac,$SUFFIX";)' remove:aci: '(target = "ldap:///sudocmd=*,cn=sudocmds,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Delete Sudo command";allow (delete) groupdn = "ldap:///cn=Delete Sudo command,cn=permissions,cn=pbac,$SUFFIX";)' remove:aci: '(target = "ldap:///sudocmd=*,cn=sudocmds,cn=sudo,$SUFFIX")(version 3.0;acl "permission:Add Sudo command";allow (add) groupdn = "ldap:///cn=Add Sudo command,cn=permissions,cn=pbac,$SUFFIX";)' |